Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/0hULTSnwFV8fFn3HXNrHVRSjans.roa
File: 0hULTSnwFV8fFn3HXNrHVRSjans.roa (raw, json)
Hash identifier: s8QRjCouLCPo42I2+PMSOPVG2tklusu8cJ9rJGYO5Mg=
Subject key identifier: D2:15:0B:4D:29:F0:15:5F:1F:16:7D:C7:5C:DA:C7:55:14:A3:6A:7B
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 018CC492F596C4086F023462C524F2A01593
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/0hULTSnwFV8fFn3HXNrHVRSjans.roa
Signing time: Mon 01 Jan 2024 10:30:14 +0000
ROA not before: Mon 01 Jan 2024 10:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56647
IP address blocks: 2.56.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:f5:96:c4:08:6f:02:34:62:c5:24:f2:a0:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Jan 1 10:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2150b4d29f0155f1f167dc75cdac75514a36a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:fd:4b:80:d5:9f:e3:09:50:28:f1:49:38:
be:0d:ca:fa:6b:f2:bd:29:f2:63:b8:c1:4a:c5:27:
bd:52:42:ef:de:65:d4:7c:b7:f6:b6:e8:33:d3:d2:
f2:1f:b4:70:ad:e7:52:bc:04:b0:ad:47:a3:95:76:
9b:d9:5e:a0:f9:65:6c:a9:86:94:bf:b7:af:51:c1:
be:ed:1f:fe:ae:5b:89:5d:9b:f9:37:64:84:75:be:
49:b9:c5:01:71:c9:3e:ec:48:48:9e:16:5e:d1:a2:
f8:90:3b:c2:66:cf:ff:9b:b7:d0:f9:20:16:48:21:
4c:2f:6e:04:60:fd:51:3a:a1:ec:8f:42:2f:7d:62:
d1:f1:ad:56:b8:6b:33:5e:e2:40:0f:1c:2a:d6:a7:
6d:f8:cf:89:b5:8b:83:ed:4a:6b:b7:76:19:40:94:
7a:a7:21:bd:2a:8c:50:60:5b:79:3b:45:a6:73:17:
92:b1:f8:f7:6f:c9:4b:bc:02:c0:7f:d9:cb:95:1f:
61:ad:83:93:ff:8c:37:ba:c9:7f:1f:f3:1e:a6:6f:
c4:4d:92:41:67:10:16:6f:52:07:88:6f:e9:dc:ed:
4e:1c:76:2e:85:70:b8:8b:b9:7f:b6:8b:17:19:07:
26:9a:7c:ee:7a:19:2e:6a:43:00:0a:35:e4:30:1b:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:15:0B:4D:29:F0:15:5F:1F:16:7D:C7:5C:DA:C7:55:14:A3:6A:7B
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/0hULTSnwFV8fFn3HXNrHVRSjans.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.147.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7f:30:fc:86:43:06:d3:ba:db:d5:ad:a6:26:e9:7d:2b:ac:
89:20:5e:7b:e9:b1:19:30:fa:f4:be:bb:dd:93:ce:01:67:1d:
7b:96:56:5a:a0:97:c5:37:a5:21:3a:0d:d5:cb:bc:0e:6c:b1:
68:0a:18:d8:8f:34:1c:22:d1:f7:b2:4f:73:42:05:4b:71:14:
72:1f:22:0c:6f:e4:56:7d:70:48:3b:4f:f1:43:45:c2:2e:3f:
15:57:1b:96:77:cd:36:7b:df:b7:0b:d7:5e:fb:21:a7:cf:17:
5e:16:3f:ba:5a:ed:a5:df:a0:81:a7:6e:f5:80:bb:53:0a:43:
e7:8d:8e:04:85:36:fc:a1:7f:e3:eb:6c:63:a9:a4:e0:c6:8b:
12:c0:90:90:31:64:9c:7d:a7:35:63:03:8e:8c:f3:57:fb:4f:
3f:49:12:1f:1d:68:c1:f7:6a:da:62:4a:95:97:bf:68:3f:ab:
a2:98:75:9c:96:81:c2:f2:0d:a5:60:67:e9:7c:fb:f9:92:8a:
34:c4:e4:7d:38:7a:a7:35:cb:1c:5f:9f:bc:ed:2d:54:bb:97:
5f:83:26:50:21:ff:79:9d:87:2c:0c:1f:d3:91:6d:14:57:1a:
f0:ee:e0:67:ff:2c:1d:02:29:39:25:84:ca:7a:d8:f6:fb:4b:
f5:57:23:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkvWWxAhvAjRixSTyoBWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWVmM2Q2MjZhNzU0ZTQzZDA3YzcwMGQwNTEzYzExNGI2
NjBlZjUwHhcNMjQwMTAxMTAzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjE1MGI0ZDI5ZjAxNTVmMWYxNjdkYzc1Y2RhYzc1NTE0YTM2YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+L9S4DVn+MJUCjxSTi+Dcr6a/K9
KfJjuMFKxSe9UkLv3mXUfLf2tugz09LyH7RwredSvASwrUejlXab2V6g+WVsqYaU
v7evUcG+7R/+rluJXZv5N2SEdb5JucUBcck+7EhInhZe0aL4kDvCZs//m7fQ+SAW
SCFML24EYP1ROqHsj0IvfWLR8a1WuGszXuJADxwq1qdt+M+JtYuD7Uprt3YZQJR6
pyG9KoxQYFt5O0WmcxeSsfj3b8lLvALAf9nLlR9hrYOT/4w3usl/H/Mepm/ETZJB
ZxAWb1IHiG/p3O1OHHYuhXC4i7l/tosXGQcmmnzuehkuakMACjXkMBupZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNIVC00p8BVfHxZ9x1zax1UUo2p7MB8GA1UdIwQY
MBaAFK4e89Ymp1TkPQfHANBRPBFLZg71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUt
OGU4MWQxMzUwNzM2LzEvMGhVTFRTbndGVjhmRm4zSFhOckhWUlNqYW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUtOGU4MWQxMzUwNzM2
LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjiTMA0G
CSqGSIb3DQEBCwUAA4IBAQCifzD8hkMG07rb1a2mJul9K6yJIF576bEZMPr0vrvd
k84BZx17llZaoJfFN6UhOg3Vy7wObLFoChjYjzQcItH3sk9zQgVLcRRyHyIMb+RW
fXBIO0/xQ0XCLj8VVxuWd802e9+3C9de+yGnzxdeFj+6Wu2l36CBp271gLtTCkPn
jY4EhTb8oX/j62xjqaTgxosSwJCQMWScfac1YwOOjPNX+08/SRIfHWjB92raYkqV
l79oP6uimHWcloHC8g2lYGfpfPv5koo0xOR9OHqnNcscX5+87S1Uu5dfgyZQIf95
nYcsDB/TkW0UVxrw7uBn/ywdAik5JYTKetj2+0v1VyMJ
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:08 2024 by rpki-client on console-ams.rpki-client.org